On Tue, 03 Jan 2012 11:06:23 -0600 Ian Pilcher wrote: > A VLAN-based approach is definitely going to be more robust. Not only that, I was actually able to make it work :-). http://home.comcast.net/~tomhorsley/wisdom/braindump/isolate.html I don't know if it is the best way, but it does finally seem to function the way I want.